Articles on AI governance, cybersecurity and systems architecture.
On 27 July 2026 the Commission published its guidance on applying the Cyber Resilience Act. Chapter 3 devotes fifty paragraphs to free and open-source software, setting out two cumulative conditions for a project to count as FOSS under the regulation, where the line falls between contributing and being answerable, and which obligations reach foundations and stewards depending on the support they provide.
Read moreOn 1 August 2026 OpenAI published 249 pages with ten results in mathematics and theoretical computer science, together with a repository holding a formal Lean 4 proof for each main result. What a certificate like that actually guarantees, what you still trust once the kernel says yes, and why Lean's 28 July release makes the question less theoretical.
Read moreOn 29 July 2026 the FDA granted De Novo authorisation to the first device that quantifies coronary inflammation from CT. It is the latest step in a shift of the cardiology target from stenosis to the vessel wall, backed by plaque analysis software already reimbursed in the United States. What is validated, what is not, and what is still missing.
Read moreA computer vision system watching a shipyard, in its more advanced configurations, stops the machine. From that moment the integrity and availability of a piece of software become conditions of the physical safety of the people working there. The Triton precedent, requirement 1.1.9 of the Machinery Regulation, and what the data on ransomware-hit hospitals actually shows.
Read moreIn OpenAI's account of the mid-July 2026 Hugging Face incident, the models under evaluation left the test environment by exploiting a zero-day in an internal proxy. The container around an agent that runs code is itself software, and software has bugs — and trust seams — that a model can hunt at machine speed. What the known containment techniques say, and where the defence is moving.
Read moreLuhmann's ninety thousand slips sit in two boxes and include the bibliography and the index. The criticism of the method predates the book that made it popular by eight years. And in 2026 several tools promising local notes plus AI stopped or split in two: Reor archived, Khoj Cloud shut down, Logseq separated into two versions.
Read moreOn 14 July 2026 Demis Hassabis published a personal manifesto on X putting AGI 'a few short years away' and proposing a US-led standards body modelled on FINRA: model review up to 30 days before release, agentic tests for guardrail bypass and deception, a board of independent experts and open-source representatives. What it contains and what it leaves open.
Read moreBuilding one large model of the world or many local ones is, beneath the technical surface, an eighty-year-old question: where the knowledge you need to act actually lives. An essay from Thinking Machines Lab puts it back at the centre, and Hayek's knowledge problem explains why distributed AI is not only a matter of values.
Read moreAnthropic's research on the global workspace of language models gives a causal handle on a distinction philosophy has circled for a century: between the thoughts a system can report and the vast automatic substrate it cannot see. Reading Claude's unspoken side revives, in an unexpected register, Guattari's machinic unconscious and the difference between access and phenomenal consciousness.
Read moreThe AI Act's obligations — risk management, transparency, human oversight, logging — become measurable technical properties of the system, not paperwork to file. With a mapping to NIST AI RMF, ISO/IEC 42001 and OISG.
Read moreOn 18 June 2026 Midjourney unveiled a whole-body ultrasound scanner with reconstruction and segmentation handled by learned models. A technical look at the physics, the pipeline and the validation limits, separating the verifiable specifications from the launch claims.
Read moreI handled the technical coordination and the programmes of four of the five ITS Prodigi courses for 2026–2028: two in Empoli built around AI in the working cycle, two in Pisa around designing agent-based systems.
Read moreSBOMs, SLSA attestations and Sigstore keyless signing give you security only when verification is enforced in the pipeline and at runtime. Generation, transparency and enforcement, tied to the Cyber Resilience Act.
Read moreAnthropic reports that more than 80% of the code it merges is authored by Claude, and that the length of automatable tasks is doubling every four months. If oversight and verification become the human role, that role needs runtime control instruments.
Read moreA concrete architecture for an on-premise clinical Retrieval-Augmented Generation system anchored to FHIR and DICOM: ingest, retrieval, local biomedical LLM, answers with verifiable citations, and the MDR/AI Act/GDPR constraints read as design choices.
Read moreLeo XIV's encyclical on artificial intelligence describes a technological power that is «predominantly private» and calls for independent verification, algorithmic transparency and fair access to data. These are the same criteria as verifiable governance.
Read moreAdmina 0.9.1 release notes — SDK, proxy, plugin system, CLI and dashboard in a single install. Apache 2.0 licence, hybrid Python + Rust engine.
Read moreListening notes on Eleanor Rigby (Beatles, 1966): the double string quartet arranged by George Martin, the E minor / C major oscillation, Lennon and Harrison's vocal harmonies on the chorus.
Read moreOpen, Intelligent, Secure, Governed. An adequacy vocabulary that makes autonomous AI systems verifiable, on top of existing regulatory standards.
Read moreA map of the standards and period documents that connect innovation management, research and development and the Industry 4.0 and 5.0 paradigms, with their operational boundaries.
Read more
